68de812ffc84aaf4f7a5b3f7b55472f2a525fe43c60e64539a84506fcf386d0e

Analysis

max time kernel
134s
max time network
137s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
09/05/2024, 04:40

Target

$PROGRAMFILES64/StartAllBack/startscreen.exe
Size

71KB
MD5

a2d6e2201be02973328038457aa64bba
SHA1

684338bd758a92449d43c49a0aa539f323760215
SHA256

f4e76abf0df055fae97863708412773b51197bae0ddd9692a9509e824d847df0
SHA512

21002b3b3cd01beb923692addaef4e5d0fcbee972154e25bea2c4ece591185bf8e6221959fbcc772fc7e7f73dce18747909dcd9c04423a0ade70f6cfba72f135
SSDEEP

768:cH8C2KZJVCso1iFS4dA38XFKw/v5lUcB6VC2Tl4GLxEFiRS:or5VcUdA32FfvIC6Z2GLxeio

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4184	startscreen.exe

C:\Users\Admin\AppData\Local\Temp\$PROGRAMFILES64\StartAllBack\startscreen.exe
"C:\Users\Admin\AppData\Local\Temp\$PROGRAMFILES64\StartAllBack\startscreen.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4184